This is just the way gnutella works I think. Once a node make a connection it may be in touch with thousands of other peers. These peers will regularly try and contact the host to download files or form new gnutella connections. If your firewall's blocking this they'll never get through.

Most gnutella clients can be set to indicate they're behind a firewall which will prevent much of the inbound traffic, but the user must set it up correctly.